...
- Exchange mode: From the drop-down menu, select IKEv2.
- PFS Group: From the drop-down menu, select DH14 (modp2048).
5.8) Click As authentication via EAP cannot be configured via the setup wizard, these steps have to be configured manually in the Advanced VPN Client profile (see steps 5.12 - 5.13). Therefore click Next without making changes.
5.9) For the IP address assignment select the drop-down menu entry IKE Config Mode. This allows the Advanced VPN Client to obtain an IP address from the router when dialing in via VPN.
...